Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa
File: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (raw, json)
Hash identifier: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=
Subject key identifier: 58:5F:D4:53:32:72:05:75:51:61:A5:81:47:3F:40:E5:1A:8F:EE:E3
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 0194258EF169534829BD2D369AFE4394E551
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56515
IP address blocks: 31.128.0.0/19 maxlen: 24
176.110.144.0/20 maxlen: 24
185.24.164.0/22 maxlen: 24
2a04:2b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:69:53:48:29:bd:2d:36:9a:fe:43:94:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585fd453327205755161a581473f40e51a8feee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:60:a3:9c:58:a7:26:67:cf:c4:cd:69:b1:
f5:0e:d6:6d:2d:0f:8c:1b:28:1e:f8:26:88:4e:a2:
86:17:6b:a0:f4:fc:eb:f2:fc:1c:25:00:1e:ab:b3:
52:90:1b:e6:82:eb:7d:04:59:10:d1:3b:60:f1:02:
12:20:47:1d:a1:9c:ea:77:08:0d:aa:73:45:d3:b5:
69:d1:52:76:96:32:3a:da:be:63:d0:d7:36:22:d2:
58:a1:a5:cd:ee:06:7b:9f:1c:a7:ce:8a:b7:ed:d1:
35:23:5b:73:66:5e:c8:47:ef:f1:85:65:67:8f:37:
60:a0:fa:c0:50:49:f8:b2:05:a5:29:26:ea:b1:9f:
72:bc:57:d1:81:5f:cb:e7:f5:d7:ac:ec:b8:3e:36:
68:02:7e:4f:e7:be:e9:e1:f3:8e:bf:1f:ec:c6:ae:
4e:11:5b:de:60:65:7b:d3:45:8d:bb:41:0a:0e:90:
b5:36:72:8f:93:8c:b4:22:a9:ad:c2:fc:f3:ec:a6:
3b:de:5e:19:b6:61:86:78:70:a4:9b:0a:d9:03:08:
f5:38:c1:ba:f5:f6:12:a2:3f:4c:f1:5a:df:b4:9c:
f9:45:d5:1f:d3:b4:2a:ec:01:53:9b:58:87:39:d4:
41:11:1c:e4:fe:ca:e8:96:b5:28:16:ec:f3:91:dc:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:D4:53:32:72:05:75:51:61:A5:81:47:3F:40:E5:1A:8F:EE:E3
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.0.0/19
176.110.144.0/20
185.24.164.0/22
IPv6:
2a04:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
44:32:15:f9:ac:2d:87:63:7f:cd:55:36:d7:0c:dc:95:b3:da:
5e:ff:9b:fc:74:d3:6d:96:a0:40:a0:98:5d:24:be:82:30:f1:
43:21:47:1f:e9:65:ae:cc:b6:8b:d2:f6:3f:e6:e6:b0:6e:2c:
8a:ca:25:24:c9:c6:d3:d9:63:49:0e:6f:57:9f:96:15:0c:24:
c3:4d:c1:66:75:4c:8a:8a:62:e0:ea:13:99:c1:74:8a:fc:33:
00:aa:fc:38:4d:3a:0a:bc:01:89:d3:b9:95:98:04:f2:2c:83:
33:7f:fd:72:b0:1a:e7:3f:76:af:9a:8d:0e:5f:98:b6:bf:7c:
b8:5c:2d:cc:58:e9:a5:c9:61:74:a6:1c:08:b6:fe:f3:52:cf:
a6:2b:b7:60:dd:26:28:6c:3c:eb:80:bf:bd:4d:85:61:bd:5f:
48:78:17:65:6b:7d:d2:75:dd:6d:aa:70:8d:e9:d1:09:a6:aa:
5d:99:a6:7d:06:4f:b1:6a:f8:51:ec:1d:8f:a1:5d:52:8e:e3:
52:bb:65:4e:f6:b8:18:ea:dd:04:9c:96:98:f0:ba:96:05:52:
42:c7:be:ed:17:be:30:0f:40:51:80:73:0a:be:e5:cf:ed:a6:
0c:14:73:df:08:ce:93:79:68:79:e7:ec:3c:27:63:c8:b2:49:
65:6d:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:53 2025 by rpki-client